<html>
<meta charset="utf8">
<head>
<script>
document.write("Hello World!");
</script>
<noscript>JavaScript not supported.</noscript>
<meta name="description" content="This is a test.">
<meta http-equiv="refresh" content="300">
<meta http-equiv="Content-Security-Policy" content="child-src 'self'">
</head>
<body>
<select name="choices" hidden>
  <option value="c1">c1</option>
  <option value="c2">c2</option>
</select>
</body>
</html>
